Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File:                     FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier:          j5yiG7FS91U9rat2blsJ+fNteUDjnDWOuI6dT67q0qs=
Subject key identifier:   68:17:94:B7:47:49:FC:94:BE:B3:A1:D2:81:B9:20:A4:C1:E4:CC:48
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer:       /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial:       018F874B1549112C90C889DBDD7BF33B76C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number:          0358
Signing time:             Fri 17 May 2024 16:03:15 +0000
Manifest this update:     Fri 17 May 2024 16:03:15 +0000
Manifest next update:     Sat 18 May 2024 16:03:15 +0000
Files and hashes:         1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: klNj8xQDtT7/dOx5TVZU+qs5F3Dk6celnBKkjj4i+2M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:15:49:11:2c:90:c8:89:db:dd:7b:f3:3b:76:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
        Validity
            Not Before: May 17 16:03:15 2024 GMT
            Not After : May 18 16:03:15 2024 GMT
        Subject: CN=681794b74749fc94beb3a1d281b920a4c1e4cc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:91:26:2e:33:cc:6b:4b:ae:32:b5:80:53:
                    cd:bd:77:64:ed:1c:98:37:19:9d:2e:da:73:af:31:
                    bb:16:1d:16:fd:a1:38:0c:3c:da:cf:31:eb:5f:40:
                    11:b7:76:17:c8:40:29:4a:c5:d3:10:84:cf:51:20:
                    b0:f5:f3:49:bb:29:d0:70:19:f0:86:74:ec:4f:67:
                    09:03:c0:e0:54:d0:ad:d3:69:5e:d6:c8:4d:00:a5:
                    d0:dc:eb:4c:90:37:49:bd:19:b0:21:3b:dc:a9:78:
                    95:df:c7:24:ad:ad:48:e6:e7:59:3b:d2:2c:e6:48:
                    27:51:d0:76:a4:82:70:e3:0a:35:26:b5:7f:de:36:
                    49:21:27:81:a3:fc:de:b8:fa:f9:05:90:54:39:af:
                    70:a5:cf:5c:92:81:32:7b:e5:93:9b:c7:49:0a:3d:
                    3f:3a:aa:75:ee:9a:66:b1:32:bb:eb:5c:10:aa:28:
                    95:72:3d:a2:75:cf:b8:86:81:ae:ff:0e:ca:98:d6:
                    2c:f5:fd:44:b6:6c:e1:f1:67:ea:60:d7:36:8c:3e:
                    0f:23:8c:45:0f:05:fe:70:a4:b0:a8:aa:83:b3:4f:
                    94:ad:42:d9:54:d7:55:37:82:70:43:b6:8a:62:c0:
                    99:b5:42:a9:9e:06:96:c7:33:a8:a3:58:a2:c9:23:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:17:94:B7:47:49:FC:94:BE:B3:A1:D2:81:B9:20:A4:C1:E4:CC:48
            X509v3 Authority Key Identifier:
                keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:d2:a2:2d:57:e6:9f:dd:91:ad:e6:6c:94:99:29:c0:c8:8e:
         1d:57:8e:5a:64:6c:2b:fd:88:07:bc:12:36:c9:ca:05:3c:0b:
         e2:9b:e7:cd:d6:48:4c:64:09:94:12:e3:c9:f3:e3:ea:3a:b5:
         0e:cd:dd:40:19:23:06:f9:a7:c9:78:c6:33:5f:e8:c8:da:f4:
         7c:38:fe:1c:13:95:79:01:33:88:df:bd:44:18:1c:7d:dc:65:
         29:d4:fc:fa:88:c4:6f:9e:ef:fb:0c:30:54:d5:66:7b:a6:08:
         6e:91:0d:10:d8:8e:e9:5e:ff:85:31:b5:32:9e:79:ca:cf:bd:
         fc:b7:9a:90:d3:68:72:79:90:bc:f0:b3:18:55:e0:14:0b:b7:
         5c:ff:32:db:c2:48:87:2e:33:5a:bf:6c:6b:1f:cb:8a:73:4e:
         2d:0a:9f:3b:e7:f8:38:c3:69:68:ce:3e:d4:63:e2:65:76:4c:
         c4:3c:66:1e:26:75:26:f1:1a:17:0c:85:ab:d1:03:79:42:b4:
         c0:b6:86:58:7b:51:10:dc:f5:69:fa:bf:82:50:ab:d6:6b:03:
         2d:8f:4d:a3:3b:64:6e:d1:ec:85:9a:63:90:b3:78:38:1e:e9:
         ed:00:86:65:e3:f9:b6:f4:5a:44:bc:c8:1d:6b:9c:19:f1:33:
         a7:f3:2e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:08:38 2024 by rpki-client on console-ams.rpki-client.org